File tree Expand file tree Collapse file tree 1 file changed +7
-6
lines changed Expand file tree Collapse file tree 1 file changed +7
-6
lines changed Original file line number Diff line number Diff line change @@ -27,20 +27,21 @@ echo "--- Prepare keys context"
27
27
VAULT_TOKEN=$( vault write -field=token auth/approle/login role_id=" $VAULT_ROLE_ID_SECRET " secret_id=" $VAULT_SECRET_ID_SECRET " )
28
28
export VAULT_TOKEN
29
29
30
- # Signing keys
31
- vault read -field=key secret/release/signing > $KEY_FILE
32
- KEYPASS_SECRET=$( vault read -field=passphrase secret/release/signing)
33
- export KEYPASS_SECRET
34
- export KEY_ID_SECRET=D88E42B4
35
-
36
30
# Prepare a secure temp folder not shared between other jobs to store the key ring
37
31
export TMP_WORKSPACE=/tmp/secured
38
32
export KEY_FILE=$TMP_WORKSPACE " /private.key"
33
+
39
34
# Secure home for our keyring
40
35
export GNUPGHOME=$TMP_WORKSPACE " /keyring"
41
36
mkdir -p $GNUPGHOME
42
37
chmod -R 700 $TMP_WORKSPACE
43
38
39
+ # Signing keys
40
+ vault read -field=key secret/release/signing > $KEY_FILE
41
+ KEYPASS_SECRET=$( vault read -field=passphrase secret/release/signing)
42
+ export KEYPASS_SECRET
43
+ export KEY_ID_SECRET=D88E42B4
44
+
44
45
# Import the key into the keyring
45
46
echo " $KEYPASS_SECRET " | gpg --batch --import " $KEY_FILE "
46
47
You can’t perform that action at this time.
0 commit comments